Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×

Comment Re: *Near* the south pole... (Score 1) 496

That's right. If the story is even true, the point is likely to see how you approach it, not if you get the exact distance right. If somebody grabbed paper and pencil to work out the math and I'd asked this question that would be a serious demerit - he didn't bother checking for requirements. That's the difference between being a competent thinker and a nerd - I don't suspect SpaceX runs on nerds.

Comment NetUSB=proprietary. Is there an open replacement? (Score 2) 70

It happens I could use remote USB port functionality.

(Right now I want to run, on my laptop, a device that requires a Windows driver and Windows-only software. I have remote access to a Windows platform with the software and driver installed. If I could export a laptop USB port to the Windows machine, it would solve my problem.)

So NetUSB is vulnerable. Is there an open source replacement for it? (Doesn't need to be interworking if there are both a Linux port server and a Windows client-pseudodriver available.)

Comment Opportunity to detect MITM attacks? (Score 4, Interesting) 71

I skimmed the start of the paper. If I have this right:

  - Essentially all the currently-deployed web servers and modern browsers have the new, much better, encryption.
  - Many current web servers and modern browsers support talking to legacy counterparts that only have the older, "export-grade", crypto, which this attack breaks handily.
  - Such a server/browser pair can be convinced, by a man-in-the-middle who can modify traffic (or perhaps an eavesdropper-in-the-middle who can also inject forged packets) to agree to use the broken crypto - each being fooled into thinking the broken legacy method is the best that's available.
  - When this happens, the browser doesn't mention it - and indicates the connection is secure.

Then they go on to comment that the characteristics of the NSA programs leaked by Snowden look like the NSA already had the paper's crack, or an equivalent, and have been using it regularly for years.

But, with a browser and a web server capable of better encryption technologies, forcing them down to export-grade LEAKS INFORMATION TO THEM that they're being monitored.

So IMHO, rather than JUST disabling the weak crypto, a nice browser feature would be the option for it to pretend it is unpatched and fooled, but put up a BIG, OBVIOUS, indication (like a watermark overlay) that the attack is happening (or it connected to an ancient, vulnerable, server):
  - If only a handful of web sites trip the alarm, either they're using obsolete servers that need upgrading, or their traffic is being monitored by NSA or other spooks.
  - If essentially ALL web sites trip the alarm, the browser user is being monitored by the NSA or other spooks.

The "tap detector" of fictional spy adventures becomes real, at least against this attack.

With this feature, a user under surveillance - by his country's spooks or internal security apparatus, other countries' spooks, identity thieves, corporate espionage operations, or what-have-you, could know he's being monitored, keep quiet about it, lie low for a while and/or find other channels for communication, appear to be squeaky-clean, and waste the tapper's time and resources for months.

Meanwhile, the NSA, or any other spy operation with this capability, would risk exposure to the surveilled time it uses it. A "silent alarm" when this capability is used could do more to rein in improper general surveillance than any amount of legislation and court decisions.

With open source browsers it should be possible to write a plugin to do this. So we need not wait for the browser maintainers to "fix the problem", and government interference with browser providers will fail. This can be done by ANYBODY with the tech savvy to build such a plugin. (Then, if they distribute it, we get into another spy-vs-spy game of "is this plugin really that function, or a sucker trap that does tapping while it purports to detect tapping?" Oops! The source is open...)

Comment Re:Arbitrary appendages? (Score 2) 50

Well that was my point about having very plastic brains. I'm not a neuroscientist, and I don't know how much details like (I have specifically four major appendages to control; two arms, two legs) are baked into the brain from day 0, vs. being just one of the configurations to which a very young brain can adapt.

You missed the point, I think.

The bionic foot in the article doesn't receive signals directly from the brain. It receives signals as they arrive at existing muscles. So we're talking about a brain that has already been wired naturally to control normally-grown muscles, and hijacking that message to also actuate motors. To use this process for additional limbs, you'd have to have a person who had grown those limbs to begin with.

Comment Re:I dont get why... (Score 1) 91

If you want to know something that's happening right now, you go search Twitter. If you just want to read articles written about something that happened yesterday, you search Google.

Google hates "you go search NotGoogle". Their benefit is obvious - they sell ads for the same searches.

They should have done this five years ago - the old nimble Google of 2001 would have quickly indexed Twitter and Facebook, and every other silo of information. It's only Big Corporate Google that can't acknowledge another source of information for some sort of ego-bruising related reason. "Index all the world's information ... except if it's hosted by a company run by that guy down the street who drives that ridiculous 918 Spyder".

Comment Re:Powergirl Expansion a Myth (Score 2) 228

I found the article you were referring to.

http://ragnell.blogspot.com/20...

It was written after the principles were dead and after several of them had confirmed the story.

Sure- they may have been lying. But also, looking at the older issues, her breasts do not seem like the double G whoppers they became later.

They do complement Woody in the article on at least drawing her with realistic anatomy.

Comment Re:But...batteries? (Score 1) 85

the end user wouldn't notice or care about the electrical cost increase of 1-2 dollars a month. What they will notice is a subsidized or free device that can do things that other devices cannot do.

If it's possible to offer some compelling new service for 1-2 dollars per month, why not just charge that directly, instead of the Rube Goldberg method?

Comment So... (Score 4, Insightful) 150

What percentage of them would expect to receive zero praise and potential reprisal if they did report a security problem?

Yeah, sure, it's depressing that people aren't courageous moral heroes, or motivated to go above and beyond, most of the time, especially about boring stuff or things likely to get them in trouble.

Guess what? That's one of the areas where management is supposed to be earning its money. One of the differences between an effective organization and a trainwreck is how good the flow of information is: are important observations from the periphery being collated and passed on so that HQ can actually achieve a coherent larger picture of the world? Are directions and information passed back down usefully informed by that picture? Or do you have unrealistic demands and buzzword nonsense flowing down; and soothing lies flowing up?

This doesn't mean that 100% of employees are innocent('insider threats' are a subset of 'people who wouldn't report a security breach', since they create them; but not a terribly large subset); but if you have this problem on a large scale, that's because your organization is dysfunctional.

Comment Re:You won't like this... Maybe... (Score 1) 228

Woman vs. man in a bare-knuckle, no-rules fight? It happened, and the story is a wild one

http://mmajunkie.com/2014/10/w...

âoeI have total respect for him, for taking that fight,â Pereira said. âoe ⦠Iâ(TM)ve been asked if I was crazy to set up that fight. Thatâ(TM)s true. I was crazy. I was crazy to have her fight against one man only. To make it fair, she should have fought two men.â

I'm 6'5" and I'm sure Ediane Gomes could kick my ass six ways from sunday in a fist fight. It would be entirely credible.

---

The only reason that a female superhero wouldn't be credible is acting, direction, and writing.

Comment And both genders are relentlessly de-aging (Score 5, Insightful) 228

When I was 13, I was reading stories about competent 30 year old war and super heroes. Reed Richards had a decade of experience.

Today, everyone seems to be 19 to 22 yet they are somehow completely experienced and more competent than anyone older than they are. (re: the recent Star Trek films). Rogue especially has deaged tremendously from about 30 to about 20.

For some reason, when i was a kid, you didn't need children to attract an audience but these days you do.

It's so unrealistic that it is really jarring to me. These young children lack the experience and gravitas to be in the parts they are playing.

Wolverine at least still has an appearance of being in his mid 30's but he's basically immortal so it doesn't really apply to him except... it seems like a lot of "tricks" he would have seen a dozen times by now.

Comment Condoms problems (Score 1) 57

Also: condoms sometimes break, sometimes they slip off, and sometimes they are used incorrectly.

Well if you want to factor in risks:
- risks of condom failure are very low, specially when used properly (it possible to learn to use them properly).

- there is also a thing called an emergency treatment. If started soon enough (= in the few hours after an incident, the sooner, the better the results, useless after 36 hours) risks of HIV transmission are dramatically reduced.
Basically it's an intensive anti-retroviral therapy that one needs to take either for a certain time until safe, or until the results come back and the partner of the incident is proved safe.

So yes, a condom can break. But you can also react quickly and fix those situations too.

(Note: works also in case of blood contact, like a nurse working in a hospital pricking a finger on a contaminated needle. That's the situation these emergency therapies were developed for).

(Still it's an intensive treatment, with secondary effect. Instead of everyone counting on it and the whole sexually active population popping pills like candy - which would be both a big cost and a big risk that somebody got problems because of the meds - it's better that everyone wears proper protection and the few failure cases be handled on a case by case basis depending on specific risk).
  It is much safer not to point that gun at a person, even if you're sure the safety is on and the gun unloaded

Comment Re:*sigh* (Score 2) 228

I think most the readers don't care until they are older and have been reading comics for a while. The boobs, porn faces, and porn poses are a result of the artists. Powergirl specifically has big boobs as a prank by the artist.

Once the readers are a bit older (14+), then yea some would like to buy a sexy version of the superheroine they've read about rather than a sexy poster of some random victoria's secret or sports illustrated model. Either way, the 16 year old boy is going to have a sexy poster of a girl of some kind. And there are sexy boy posters for the girls at that age too tho most are teen bands.

Slashdot Top Deals

Garbage In -- Gospel Out.

Working...